Vulnérabilité dans GitLab (12 novembre 2026)
Teaser from the source
Une vulnérabilité a été découverte dans GitLab. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
This is the RSS-feed teaser. Read the full article at the original source.
Read at CERT-FR (ANSSI)More on GitLab
Other advisories
- MediumCVE-2026-105437GitLab: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- CriticalCVE-2026-92470GitLab: Mehrere Schwachstellen
- CriticalCVE-2026-110264GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
Other news entries
- GitLab: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- GitLab: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- NCSC-2026-0480 [1.00] [M/H] Kwetsbaarheid verholpen in GitLabNewsNCSC-NL
- Dringend patchen: 11.000 Gitlab-Instanzen durch laufende Angriffe gefährdetNewsGolem.de — Security
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
Source: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1520/
ID